CVE-2025-24530: An issue was discovered in phpMyAdmin 5.x before 5.2.2. An XSS vulnerability has been discovered for the check tables feature. A crafted table or database name…

PriorityP432medium6.4CVSS 3.1

AVNACLPRLUINSCCLILAN

EPSS

0.41%

33.5th percentile

An issue was discovered in phpMyAdmin 5.x before 5.2.2. An XSS vulnerability has been discovered for the check tables feature. A crafted table or database name could be used for XSS.

Affected

7 ranges

Vendor	Product	Version range	Fixed in
debian	phpmyadmin	< phpmyadmin 4:5.2.1+dfsg-1+deb12u1 (bookworm)	phpmyadmin 4:5.2.1+dfsg-1+deb12u1 (bookworm)
phpmyadmin	phpmyadmin	>= 0 < 4:5.0.4+dfsg2-2+deb11u2	4:5.0.4+dfsg2-2+deb11u2
phpmyadmin	phpmyadmin	>= 0 < 4:5.2.1+dfsg-1+deb12u1	4:5.2.1+dfsg-1+deb12u1
phpmyadmin	phpmyadmin	>= 0 < 4:5.2.2-really5.2.2+20250121+dfsg-1	4:5.2.2-really5.2.2+20250121+dfsg-1
phpmyadmin	phpmyadmin	>= 0 < 4:5.2.2-really5.2.2+20250121+dfsg-1	4:5.2.2-really5.2.2+20250121+dfsg-1
phpmyadmin	phpmyadmin	>= 5.0.0 < 5.2.2	5.2.2
phpmyadmin	phpmyadmin	>= 5.0.0 < 5.2.2	5.2.2

CVSS provenance

nvdv3.16.4MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

osv6.4MEDIUM

vendor_debian6.4MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.